Alberta · ATIA

Alberta's new access and privacy regime, in one platform

In 2025 Alberta replaced FOIP with two new statutes — the Access to Information Act and the Protection of Privacy Act. AccessPoint runs both from one platform, pre-configured for Alberta and running inside your own Microsoft 365 tenant.

Start Free Trial Request a Demo

Alberta at a glance

Response deadline
30 business days from receipt
Extensions
Permitted — large volumes, consultations, third-party notice; longer extensions need OIPC approval
Governing law
ATIA (access) and the Protection of Privacy Act (privacy), replacing FOIP as of June 11, 2025
Privacy duties
Breach notification and privacy impact assessments under the Protection of Privacy Act
Oversight
Information and Privacy Commissioner of Alberta (order-making)
Languages
English

Built for Alberta

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

ATIA request lifecycle

Intake to disclosure on Alberta's 30-business-day clock, with extensions, the ATIA exemption catalogue, fee estimates, and records ready for the order-making OIPC — all built on Microsoft 365.

Built for the FOIP transition

AccessPoint ships configured for the new Access to Information Act and Protection of Privacy Act that replaced FOIP in June 2025 — the new citations, exemptions, and privacy duties, ready on day one.

Breach notification

Log a privacy breach under the Protection of Privacy Act, assess the risk of harm, and get a live checklist of what must be reported to the Commissioner and affected individuals, and by when.

Privacy impact assessments

Run the privacy impact assessments expected under the Protection of Privacy Act — screeners, questionnaires, an embedded risk register, and a defensible, exportable record.

OIPC reviews

Track requests for review and inquiries before the order-making Commissioner with their own statutory clocks, an investigation workspace, and a guided closure.

In your own Alberta tenant

Every request, assessment, and record stays inside your own Microsoft 365 and Azure tenant — no third-party cloud, no per-user fees, and full control of your data.

The FOIP split

Alberta split FOIP into two Acts. AccessPoint runs both.

On June 11, 2025 Alberta replaced its long-standing Freedom of Information and Protection of Privacy Act with two purpose-built statutes: the Access to Information Act for access requests and the Protection of Privacy Act for the privacy program, including breach notification and privacy impact assessments. Most offices already handle access requests — but the privacy statute adds duties a request tracker cannot meet. AccessPoint operates both on one platform, in your own tenant, so your access and privacy programs live in the same system through the transition and beyond.

Access to Information Act The 30-business-day request lifecycle with the new ATIA citations.
Protection of Privacy Act Breach notification and privacy impact assessments in one place.
One audit trail Every action across both Acts on a hash-chained ledger.

Configured out of the box

Installing the ca-ab-atia configuration pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: Manage ATIA with Confidence
  • The Access to Information Act and Protection of Privacy Act as the legal-authority spine
  • Alberta statutory-holiday calendar and 30-business-day rules
  • The ATIA exemption and exclusion catalogue, colour-coded for redaction
  • Extension reasons with citations and limits
  • Requestor fee categories and the Alberta fee schedule
  • OIPC review and complaint grounds and dispositions
  • Alberta timeliness brackets and statistical-report templates
  • ATIA correspondence templates with statutory wording

Alberta Questions

Does AccessPoint support Alberta's new ATIA and Protection of Privacy Act?
Yes. On June 11, 2025 Alberta replaced FOIP with the Access to Information Act (access requests) and the Protection of Privacy Act (the privacy program). AccessPoint ships pre-configured for both — the new citations, exemptions, deadlines, breach-notification rules, and privacy impact assessments.

What is the response deadline for an ATIA request?
A public body must respond within 30 business days, with extensions available for large volumes, consultations, or third-party notice; longer extensions require the Commissioner's approval. AccessPoint calculates every date on Alberta's business-day calendar.

Is the Alberta Commissioner order-making?
Yes. The Office of the Information and Privacy Commissioner of Alberta reviews access decisions and can issue binding orders, and it investigates privacy complaints and breaches under both new Acts. AccessPoint tracks reviews and inquiries with their statutory clocks and a guided closure.

Where does Alberta data reside?
Entirely within your own Microsoft 365 and Azure tenant. Requests, documents, assessments, and audit history never leave your control — no third-party cloud and no cross-border data transfers.

Run ATIA and the Protection of Privacy Act in One Platform

Try AccessPoint free for 30 days, pre-configured for Alberta. No credit card required.

Start Free Trial